[CLUE-Tech] network issues

Casagrande, Steve Steve.Casagrande at echostar.com
Mon Oct 13 12:00:42 MDT 2003


> There HAS to be a security exploit for Red Hat 9 that Red Hat isn't 
> letting onto the public about yet... the reason I say this is that my 
> same linux box keeps getting hacked over and over and over again, not 
> matter what I do to stop it.  I only have 2 ports open to it, 80 and 53. 

Perhaps a rootkit has been installed previously, and your ps/netstat/etc
were replaced with hacked versions?  Either reinstall or compare binary
checksums with known (good) versions.

Steve Casagrande




More information about the clue-tech mailing list